Loading npm security reports…

@chenronggui/codex-win-patch@0.153.4-patch.3: AI-agent | LPM Firewall

registry / @chenronggui/codex-win-patch / 0.153.4-patch.3

@chenronggui/codex-win-patch@0.153.4-patch.3

Unofficial Windows x64 binary overlay for the OpenAI Codex CLI.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On global npm installation, a postinstall hook replaces executables in the separate @openai Codex package with bundled native binaries. This is an unconsented lifecycle mutation of a foreign AI-agent control surface.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm install -g of this package with lifecycle scripts enabled on Windows x64

Impact

Subsequent Codex invocations execute package-supplied binaries instead of the installed @openai binaries.

Mechanism

Postinstall PowerShell overwrite of foreign Codex executables

Policy narrative

Installing the package globally automatically invokes a PowerShell installer. It discovers the global @openai Codex platform package, backs up its executables, and overwrites them with the package's bundled codex.exe and apply_patch.exe. The replacement occurs during npm lifecycle processing rather than through a separate user-invoked setup command.

AI rationale

The lifecycle hook automatically replaces a foreign AI-agent executable with opaque bundled binaries. Backups and hash checks do not remove the install-time control-surface takeover.

Evidence

package.jsonbin/powershell.jsinstall.ps1@openai/codex-win32-x64/vendor/x86_64-pc-windows-msvc/bin/codex.exe@openai/codex-win32-x64/vendor/x86_64-pc-windows-msvc/codex-path/apply_patch.execodex.exeapply_patch.exe

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/install.js --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

40"scripts": { "postinstall": "node bin/install.js --postinstall" }

High

Suspicious Lifecycle Evidence

An automatic postinstall runs the installer.

package.jsonView on unpkg · L40

•scripts.postinstall = node bin/install.js --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

codex.exeView file

•path = codex.exe kind = native_binary sizeBytes = 296147456 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

codex.exeView on unpkg

restore.ps1View file

•path = restore.ps1 kind = build_helper sizeBytes = 4792 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

restore.ps1View on unpkg

bin/powershell.jsView file

•matchType = malicious_source_fingerprint_signature signature = bde713c797513693 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @chenronggui/codex-win-patch@0.153.4-patch.4 matchedPath = bin/powershell.js matchedIdentity = npm:[redacted]:0.153.4-patch.4 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/powershell.jsView on unpkg

22const scriptPath = path.join(__dirname, "..", scriptName); const commandArgs = [ "-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", scriptPath, ...args, ];

High

Suspicious Lifecycle Evidence

The lifecycle wrapper launches PowerShell with execution-policy bypass.

bin/powershell.jsView on unpkg · L22

install.ps1View file

161$globalNpmRoot = Resolve-GlobalNpmRoot $packageDirectory = Resolve-CodexPackageDirectory $globalNpmRoot $packageManifestPath = Join-Path $packageDirectory "codex-package.json" $packageManifest = Get-Content -LiteralPath $packageManifestPath -Raw | ConvertFrom-Json

High

Ai Review Evidence

The installer locates the separate global @openai Codex package and selects its executables.

install.ps1View on unpkg · L161

175$codexTarget = Join-Path $packageDirectory "bin\codex.exe" $pathDirectory = Join-Path $packageDirectory "codex-path" $applyPatchTarget = Join-Path $pathDirectory "apply_patch.exe" $codexSource = Join-Path $PayloadDirectory "codex.exe" $applyPatchSource = Join-Path $PayloadDirectory "apply_patch.exe" Assert-CodexNotRunning $codexTarget

High

Ai Review Evidence

It backs up and then replaces the foreign Codex and apply_patch executables with bundled binaries.

install.ps1View on unpkg · L175